Technology and Security Risk Director
OKX is a leading global cryptocurrency exchange offering a wide range of trading services, including spot and derivatives trading, as well as Web3 solutions.
Maintainer signals as of 9/25/2026
Investors
Projects
About OKX
OKX is a global cryptocurrency exchange known for its trading services and financial products. The platform offers a wide range of features, including spot and derivatives trading, staking services, and a user-friendly interface suitable for both beginners and experienced traders.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will oversee technology and security risk management from a second-line-of-defence perspective. You will assess risks, incidents, controls, and remediation activities; lead RCSA oversight; monitor KRIs; improve GRC systems; and advise technology stakeholders on risk-management frameworks. You will translate technical findings into prioritised actions and stay informed about emerging digital-asset risks and regulations.
Requirements
- 8+ years of information security experience with a strong security architecture or technical security background
- Experience designing, implementing, or reviewing cloud, IAM, cryptographic, network, or application security controls
- Experience in risk oversight or readiness to transition into risk oversight
- Ability to threat-model systems and assess technical evidence
- Working knowledge of cloud resilience, multi-region/AZ failover, RTO/RPO, and disaster recovery testing
- Familiarity with NIST CSF, ISO 27001, SOC 2, GDPR, and PDPA
- Ability to assess and test controls, evaluate incidents, and drive remediation
- Written and verbal communication skills for translating technical findings into business actions
- Stakeholder management skills
- Relevant degree or equivalent practical experience
Responsibilities
- Identify, escalate, assess, and mitigate technology and security risks in line with the Technology Risk Policy
- Oversee technology and security risk incidents and issues and improve related processes with first-line stakeholders
- Lead second-line oversight of the Technology Risk and Control Self-Assessment process
- Challenge first-line security risks and controls in accordance with the ERM RCSA methodology
- Define, monitor, and report security key risk indicators
- Support implementation and enhancement of GRC systems
- Advise technology stakeholders on risk-management frameworks
- Monitor emerging digital-asset trends and regulations and address new risk considerations
Benefits
- Learning and development programs
- Education subsidy
- Team-building programs and company events
- Wellness and meal allowances
- Comprehensive healthcare schemes for employees and dependants